Configure Google Workspace for MintMCP Google servers

MintMCP provides hosted MCP servers for Google Docs, Sheets, Slides, Drive, and Gmail/Calendar. Before your employees can connect, a Google Workspace admin must authorize MintMCP's OAuth apps in the Admin Console. This guide covers enabling the servers in MintMCP and granting them access in Google Workspace.

Prerequisites

• A MintMCP admin account with access to the MCP store
• A Google Workspace super admin account

Enable the Google MCP servers in MintMCP

The Google MCP servers are available as recommended servers in the MintMCP registry.

1. In MintMCP, go to MCP store > Manage store.
2. Find the Google MCP servers in the Recommended section.

3. Click Install for each Google server you want to make available to your team.

Authorize MintMCP apps in Google Admin Console

Each Google MCP server uses a separate OAuth app. Add each client ID as an authorized app in the Google Admin Console so employees can grant access when they connect.

1. Go to admin.google.com and sign in as a super admin.
2. Navigate to Security > Access and data control > API controls.
3. Click Manage third-party & internal app access.

4. Click Add app > OAuth App Name Or Client ID.
5. Enter a client ID from the table below and click Search.

Server	Client ID
Google Docs	496336791713-crgjnhc1sva1pih8bsk91shu0n0ga7mc.apps.googleusercontent.com
Google Sheets	496336791713-npvu2i05k4b0n7qafgkthghoftoe9rf7.apps.googleusercontent.com
Google Slides	496336791713-752djahev4f6tnh7l1qs1aa2qptbdi9d.apps.googleusercontent.com
Google Drive	496336791713-r8qkcs2ctoqjcngjua9d8p3mo6561g04.apps.googleusercontent.com
Gmail / Calendar	496336791713-653ukqc3ais9r58jntnvr1rcfl7plc2r.apps.googleusercontent.com

6. Select the app from the search results and click Select.
7. Choose the organizational units to apply this policy to (typically All Users) and click Continue.
8. Set the access level to Trusted (app can request access to all Google data).

9. Click Configure access.

Repeat steps 4–9 for each server in the table.

Restrict to specific scopes (optional)

If your organization's security policy requires scope-level control rather than full Trusted access, select Specific Google data in step 8 instead of Trusted, then click Update Google services or scopes to add only the scopes listed below for each server.

Base scopes (required for all servers)

Every Google MCP server requests these scopes for authentication:

Scope	Access granted
openid	OpenID Connect authentication
https://www.googleapis.com/auth/userinfo.email	View user email address
https://www.googleapis.com/auth/userinfo.profile	View basic profile info

Per-server scopes

Add these scopes in addition to the base scopes above.

Google Docs

Scope	Access granted
https://www.googleapis.com/auth/drive.readonly	Search docs, read content, get sharing info
https://www.googleapis.com/auth/drive.file	View and manage Drive files created or opened with this app
https://www.googleapis.com/auth/documents	Create docs, append/insert/replace/delete text, format text and paragraphs, insert tables

Google Sheets

Scope	Access granted
https://www.googleapis.com/auth/drive.readonly	Search spreadsheets, find sheets by name
https://www.googleapis.com/auth/drive.file	View and manage Drive files created or opened with this app
https://www.googleapis.com/auth/spreadsheets	Get/create spreadsheets, add sheets, write/update/clear cells, format cells

Google Slides

Scope	Access granted
https://www.googleapis.com/auth/drive.readonly	Search presentations
https://www.googleapis.com/auth/drive.file	View and manage Drive files created or opened with this app
https://www.googleapis.com/auth/presentations	Get/create presentations, add/duplicate/delete slides, add text/images/tables, format text, manage speaker notes

Google Drive

Scope	Access granted
https://www.googleapis.com/auth/drive.readonly	Search and list files, download content
https://www.googleapis.com/auth/drive.file	Upload files, create folders

Gmail / Calendar

Gmail scopes:

Scope	Access granted
https://www.googleapis.com/auth/gmail.readonly	Read emails, get attachments, list labels
https://www.googleapis.com/auth/gmail.compose	Send emails, reply to emails
https://www.googleapis.com/auth/gmail.modify	List emails, create/delete labels, add/remove labels on emails

Calendar scopes:

Scope	Access granted
https://www.googleapis.com/auth/calendar.readonly	List calendars, list and search events
https://www.googleapis.com/auth/calendar.events	Create, update, and delete events

Security considerations

• Each employee authenticates individually with their own Google account, so tool calls are limited by their personal Google permissions.
• Trusted access allows the MintMCP app to request any scope users consent to. Use Restricted mode if your security policy requires explicit scope approval.
• MintMCP authenticates users through per-user OAuth — no shared service account credentials are stored.

Next steps

• Tool customization — Control which Google tools are exposed to users
• MCP gateway administration — Manage access and permissions